Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3351
HistoryJan 27, 2017 - 7:03 a.m.

Exposure Of IOS Device To Attacker

2017-01-2707:03:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.005 Low

EPSS

Percentile

76.9%

libimobiledevice and libusbmuxd are vulnerable to exposure of iOS decive to attacker on the local network. The attack is possible because of a flaw in the socket_create function in common/socket.c in libimobiledevice and libusbmuxd, leading to the bypass of intended access restrictions. Therefore, the attacker can communicate with services on iOS devices by connecting to an IPv4 TCP socket.

CPENameOperatorVersion
libimobiledeviceeq1.0.0
libusbmuxdeq1.0.9